$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft File: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft (raw, json) Hash identifier: UAGVXWjZbgPLgrgRG609INUfQY72Aqh7Ndh1hB0D/dc= Subject key identifier: 3A:52:1E:30:5E:A1:D6:3D:43:79:D1:FF:00:36:79:06:2D:DF:AB:23 Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Certificate serial: 49A398B95BE17AE4E49C7F1BAA4DDDC711CC3A52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 11:15:55 +0000 Manifest this update: Thu 03 Sep 2026 11:10:55 +0000 Manifest next update: Fri 04 Sep 2026 11:23:55 +0000 Files and hashes: 1: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl (hash: Y/02ARd79+pJU2/8taPHA3S4RALTlVsHuZxBmjWhtTY=) 2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: 4ExEorQAkAboUfCg4xl3LFUmZFGrqFAxLJKE8qeWaSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a3:98:b9:5b:e1:7a:e4:e4:9c:7f:1b:aa:4d:dd:c7:11:cc:3a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Validity Not Before: Sep 3 11:10:55 2026 GMT Not After : Sep 4 11:23:55 2026 GMT Subject: CN=3A521E305EA1D63D4379D1FF003679062DDFAB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:b7:b4:c3:12:c6:d0:32:f0:f7:73:16:b0: 99:0f:f0:a3:ec:e9:b3:81:53:57:3e:60:28:f4:9a: 1f:dc:30:d2:1d:80:48:84:1f:14:73:0a:c1:97:45: c4:ba:e4:85:16:5b:7b:3c:c6:5a:b3:24:f1:80:5f: 34:27:8a:04:f2:9c:8a:d7:f8:79:ed:71:2e:63:4a: 24:ee:27:f8:1c:49:f7:d8:c3:93:f5:f2:de:ab:bd: 6d:99:8d:e3:bb:72:fb:43:ab:5a:c5:04:c2:b1:15: 78:65:84:f7:22:50:09:39:54:ae:6d:62:60:ef:0f: ae:80:27:44:4c:0e:05:bd:f2:7a:71:4e:9b:cb:24: 9e:29:7a:df:fe:64:36:c2:b0:d3:c6:d5:dc:3c:47: 30:37:57:e5:2d:f2:ec:bf:09:10:d8:ed:39:9c:5e: 12:da:3b:a3:be:23:6b:3d:fa:be:a0:7b:11:2f:eb: 2b:a8:be:a2:e5:86:28:b6:da:cb:68:f5:32:88:a4: 34:df:8e:b2:5f:c8:b1:29:99:95:e8:02:d4:d2:23: 8a:38:bb:16:c1:95:40:b5:cf:6e:c2:41:b9:69:a4: 24:65:6d:54:ae:d2:8f:31:9a:da:04:06:08:4d:7a: f8:88:56:73:12:15:ff:b6:20:66:2c:f5:42:c3:71: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:52:1E:30:5E:A1:D6:3D:43:79:D1:FF:00:36:79:06:2D:DF:AB:23 X509v3 Authority Key Identifier: keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:76:9e:15:7c:ff:1a:96:8a:47:9f:5d:ea:e3:8d:b5:f3:5e: b9:fb:46:b6:4e:aa:dc:1c:5a:3b:4d:2a:44:83:55:4c:2e:d7: ed:78:e6:23:c1:0d:54:3d:f6:a7:14:c6:75:b4:8b:71:3b:86: 27:bf:f6:1a:8e:22:27:6d:32:dd:d3:e2:69:37:d2:9f:27:86: 9f:37:23:f8:93:a0:87:87:46:08:4e:e9:40:16:69:98:fa:3f: f0:f8:a3:78:f5:b9:2f:12:b8:ab:c6:b5:46:09:78:28:e7:a9: c5:ce:3c:f6:12:d4:ac:bc:70:60:4c:b4:3e:85:24:55:e6:12: 7e:f2:ae:ba:08:1e:80:d9:b1:3c:cd:2a:06:93:64:0c:da:88: e6:17:75:52:c3:5d:22:ae:b0:11:69:24:e7:85:09:fa:21:f7: a5:b0:01:58:d1:b0:ed:a4:a3:f6:52:29:61:1c:22:90:f0:3e: 5c:3d:26:5f:5a:75:f1:1b:42:81:c1:50:fa:5d:02:26:1d:59: 97:52:8f:00:ad:29:d0:ed:0a:8c:1c:43:6b:97:51:b1:1d:11: cc:f2:ab:7b:a7:21:fa:22:f8:f2:3b:4b:00:34:a0:c2:79:ff: 7c:f4:b8:6f:e4:11:65:8f:e0:45:f8:20:3a:e6:a6:e2:3f:10: bb:9b:1d:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSaOYuVvheuTknH8bqk3dxxHMOlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVG NjZCRjdDRDAeFw0yNjA5MDMxMTEwNTVaFw0yNjA5MDQxMTIzNTVaMDMxMTAvBgNV BAMTKDNBNTIxRTMwNUVBMUQ2M0Q0Mzc5RDFGRjAwMzY3OTA2MkRERkFCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaSLe0wxLG0DLw93MWsJkP8KPs 6bOBU1c+YCj0mh/cMNIdgEiEHxRzCsGXRcS65IUWW3s8xlqzJPGAXzQnigTynIrX +HntcS5jSiTuJ/gcSffYw5P18t6rvW2ZjeO7cvtDq1rFBMKxFXhlhPciUAk5VK5t YmDvD66AJ0RMDgW98npxTpvLJJ4pet/+ZDbCsNPG1dw8RzA3V+Ut8uy/CRDY7Tmc XhLaO6O+I2s9+r6gexEv6yuovqLlhii22sto9TKIpDTfjrJfyLEpmZXoAtTSI4o4 uxbBlUC1z27CQblppCRlbVSu0o8xmtoEBghNeviIVnMSFf+2IGYs9ULDcapNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlIeMF6h1j1DedH/ADZ5Bi3fqyMwHwYDVR0j BBgwFoAUZf4donuCoPmsMYVS/S/QDvZr980wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OTNhOTMtNTg4OS00ZTAyLTllOTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3 QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVGNjZCRjdDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUZFMURBMjdCODJBMEY5QUMzMTg1NTJGRDJGRDAwRUY2NkJG N0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQw MEVGNjZCRjdDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACB2nhV8/xqWikefXerjjbXzXrn7RrZOqtwc WjtNKkSDVUwu1+145iPBDVQ99qcUxnW0i3E7hie/9hqOIidtMt3T4mk30p8nhp83 I/iToIeHRghO6UAWaZj6P/D4o3j1uS8SuKvGtUYJeCjnqcXOPPYS1Ky8cGBMtD6F JFXmEn7yrroIHoDZsTzNKgaTZAzaiOYXdVLDXSKusBFpJOeFCfoh96WwAVjRsO2k o/ZSKWEcIpDwPlw9Jl9adfEbQoHBUPpdAiYdWZdSjwCtKdDtCowcQ2uXUbEdEczy q3unIfoi+PI7SwA0oMJ5/3z0uG/kEWWP4EX4IDrmpuI/ELubHQ4= -----END CERTIFICATE-----Generated at Thu Sep 3 14:16:37 2026 by rpki-client